JOB-CUBE vulnerable to cross-site scripting

Overview JOB-CUBE provided by WEBSQUARE Co.,Ltd. is software to build websites. JOB-CUBE contains a cross-site scripting vulnerability CWE-79. Masamu Asato of National institute of Technology,Okinawa College reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#26921563: JOB-CUBE vulnerable to cross-site scripting

JOB-CUBE provided by WEBSQUARE Co.,Ltd. is software to build websites. JOB-CUBE contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the administrator's web browser. Solution Update the Software Update to the latest version according to the informati...

jenkins: job configuration issues (SECURITY-127, SECURITY-128)

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/CONFIGURE permission to bypass intended restrictions and create or destroy arbitrary jobs via unspecified vectors...

jenkins: password exposure in DOM (SECURITY-138)

Jenkins before 1.583 and LTS before 1.565.3 allows remote authenticated users with the Job/READ permission to obtain the default value for the password field of a parameterized job by reading the DOM...

jenkins: Project name disclosure via fingerprints (SECURITY-153)

The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request...

jenkins: XXE injection into job configurations via CLI (SECURITY-173)

XML external entity XXE vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to read arbitrary files via a crafted job configuration that is then used in an "XML-aware tool," as demonstrated by get-job and update-job...

msntravelnursing.com XSS vulnerability

Vulnerable URL: https://www.msntravelnursing.com/apply-travel-nurse-jobs?brand=MSN%20TRAVEL=null=DC=RN%20%20ICU%20%20%20%20Job%20in%20WASHINGTON%20%20%20%20%20%20%20%20%20%20,DC=TRAVEL'%22%26%25prompt/XSSPOSED/...

jobs.marriott.com Open Redirect vulnerability

Vulnerable URL: http://jobs.marriott.com/careers/ExitLink?exitUrl=https://www.xssposed.org/ Details: Description| Value ---|--- Patched:| Yes, at 26.02.2016 Latest check for patch:| 26.02.2016 01:25 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

PT-2016-4918

Name of the Vulnerable Software and Affected Versions Dolibarr ERP/CRM version 3.8.3 Description The issue allows remote authenticated users to inject arbitrary web script or HTML via specific parameters to the "htdocs/user/card.php" endpoint, including the lastname, firstname, email, job, or...

Veeam Management Pack 8.0 for System Center Update 1 Release Notes

Challenge Release Notes for Veeam Management Pack 8.0 for System Center Update 1. Cause Please confirm you are running Veeam Management Pack 8.0 prior to installing this update. You can check this in Operations Manager console under Administration | Management Packs, the build number should be...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

DEBIAN-CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via backtick characters in a print job...

Vulnerability in JP1/Automatic Job Management System 3

Overview A vulnerability to denial-of-service attacks was found in JP1/Automatic Job Management System 3. Impact Attackers can exploit this vulnerability to cause a denial-of-service attack by sending ill-intended messages repeatedly from a malicious host in the network. Solution Please refer to...

WordPress Job Board 1.0.0 Cross Site Scripting

Plugin Name : Job Board Effected Version : 1.0.0 and most probably lower version's if any Vulnerability : A3-Cross-Site Scripting XSS Identified by : Madhu Akula Technical Details Minimum Level of Access Required : Administrator PoC - Proof of Concept : The following fields put the payload as bel...

UBUNTU-CVE-2015-8560

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; semicolon character in a print job, a different vulnerability than CVE-2015-8327...

PT-2015-7805

Name of the Vulnerable Software and Affected Versions cups-filters versions 1.0.42 through 1.4.0 Foomatic versions 4.0.x Description The issue allows remote attackers to execute arbitrary commands via a ; semicolon character in a print job. This is due to an incomplete blacklist vulnerability in...

UBUNTU-CVE-2015-8436

Use-after-free vulnerability in the PrintJob object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on Linux, Adobe AIR before 20.0.0.204, Adobe AIR SDK before 20.0.0.204, and Adobe AIR SDK & Compiler before...

vacareers.va.gov XSS vulnerability

Vulnerable URL: http://www.vacareers.va.gov/job-search/index.asp?q==20="=Information+Technology=search Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Googl...

chromium-browser: Use-after-free in AppCache

Use-after-free vulnerability in the AppCache implementation in Google Chrome before 47.0.2526.73 allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache...